[java-idp-tomcat-base] 01/03: IDP-1008 - Add back-channel SOAP connector and properties

[Tom Zeller]

This is an automated email from the git hooks/post-receive script.

tzeller pushed a commit to branch 8.0
in repository java-idp-tomcat-base.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-tomcat-base.git;a=commit;h=fe599b64657b7c7ab88be1f015d03d744f2aff10

commit fe599b64657b7c7ab88be1f015d03d744f2aff10
Author: Tom Zeller <tzeller at dragonacea.biz>
AuthorDate: Mon Aug 8 13:46:07 2016 -0500

    IDP-1008 - Add back-channel SOAP connector and properties
    
    https://issues.shibboleth.net/jira/browse/IDP-1008
---
 src/main/resources/tomcat-base/conf/catalina.properties |  3 +++
 src/main/resources/tomcat-base/conf/server.xml          | 10 ++++++++++
 2 files changed, 13 insertions(+)

diff --git a/src/main/resources/tomcat-base/conf/catalina.properties b/src/main/resources/tomcat-base/conf/catalina.properties
index 4881840..776b8cc 100644
--- a/src/main/resources/tomcat-base/conf/catalina.properties
+++ b/src/main/resources/tomcat-base/conf/catalina.properties
@@ -261,6 +261,9 @@ tomcat.https.port=8443
 
 # The SOAP endpoint port
 tomcat.backchannel.port=9443
+tomcat.backchannel.keystoreFile=../credentials/idp-backchannel.p12
+tomcat.backchannel.keystorePass=changeit
+tomcat.backchannel.keystoreType=PKCS12
 
 #
 # Configuration for the non https connection.
diff --git a/src/main/resources/tomcat-base/conf/server.xml b/src/main/resources/tomcat-base/conf/server.xml
index 8f92aae..e9fc602 100644
--- a/src/main/resources/tomcat-base/conf/server.xml
+++ b/src/main/resources/tomcat-base/conf/server.xml
@@ -72,6 +72,16 @@
                maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
                clientAuth="false" sslProtocol="TLS" />
     -->
+    <Connector port="${tomcat.backchannel.port}" protocol="org.apache.coyote.http11.Http11NioProtocol"
+           maxThreads="150"
+           SSLEnabled="true"
+           scheme="https"
+           secure="true"
+           clientAuth="want"
+           keystoreFile="${tomcat.backchannel.keystoreFile}"
+           keystorePass="${tomcat.backchannel.keystorePass}"
+           keystoreType="${tomcat.backchannel.keystoreType}"
+           trustManagerClassName="net.shibboleth.utilities.ssl.TrustAnyCertificate" />
 
     <!-- Define an AJP 1.3 Connector on port 8009 -->
     <!-- 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.